Control: close
On 30.09.25 13:41, Richard Lewis wrote:
On Tue, 30 Sep 2025, 08:29 Paul Muster, <[email protected]> wrote:
I can't find any RegEx that starts with a question mark:
# grep -r ^? /etc/logcheck/
#
Any ideas?
i dont know, but i could believe "start of expression" (which is from grep)
may include start of a group or character classes rather thsn only the
start of a line.
Indeed. Thanks for this hint.
if you run logcheck on its own with the -d option (from commandline -- you
will need to use su/sudo: if you run "logcheck -d" it will), you will get
lots of info about what it is doing, that should help you find the files
being processed and that should help you narrow it down.
Both advices together lead me to a rules file containing "local" with
the problematic RegEx. After commenting out those the additional e-mail
is omitted.
Thank you for the quick reply and the helpful advice, Richard!
Regards,
Paul
